Privacy policy

What we collect

The address of the website you scan, the scan results (including your domain's public certificate and DNS records, such as SPF, DKIM and DMARC), screenshots of the pages and failing elements we test, any demand-letter text you paste, and a hashed form of your IP address used for rate limiting. You never need an email address to scan or to see your free results. If you ask us to email you your free results, we keep that email address with the scan to send it and to stop repeated requests. At checkout you give us an email address for delivering the report, and our payment provider shares your email address and order number with us. We never collect card details.

How we use it

To run your scan, match the letter's claims to the results, write your reports and deliver them. Demand-letter text is sent to our AI provider (Anthropic) only to extract the claims, and is never shown to anyone else. For the Performance Fix Report we send your website's address (not any personal data) to Google's Chrome UX Report API to fetch public real-user speed data.

Tips and updates (optional)

Only if you tick the box asking for them, we keep your email address with the time and wording of your consent and may send you website improvement tips, offers and FixReports updates, including a few emails in the days after you ask for your free results. Asking for your free results does not sign you up. Every such email has a link to unsubscribe, and you can also reply to ask us to remove you.

Analytics and advertising

To measure how visitors find and use the site, and how our ads perform, our public pages use Google Analytics, Google Ads, the Meta Pixel and Microsoft Clarity, which set their own cookies. Clarity records how visitors move through our marketing pages (not tool results, scans, reports or checkout). Pages that show a scan, a report or a checkout load none of these tools, and the addresses we report never include a scan or report link. When you start a scan, start a checkout or complete a purchase, our server tells Google Analytics and Meta that it happened, with the order value and the identifiers their cookies set in your browser; for checkouts and purchases Meta also receives a one-way hash of your email address so it can match the purchase to an ad. We never send them your website's address, your scan results or your reports.

Our own visit and security log

To run the Service, prevent abuse and understand which channels bring customers, we keep our own log of page views and requests: the time, the page (with any scan or report link removed), your IP address, the country (and, when our network provider supplies it, region and city) it belongs to, your browser, operating system and device type, the site that sent you, any campaign (UTM) parameters, whether you arrived from an ad click (not the click identifier itself), and what you did, such as starting a scan or a checkout. A random session identifier is kept in your browser's session storage (not a cookie) and is deleted when you close the tab. This log stays with us and is never sold or shared. IP addresses, regions and cities are erased after 30 days; the rest is kept as aggregate history. Security records (for example rate limits hit or blocked addresses) are deleted after 30 days. Our legal basis is our legitimate interest in operating, securing and improving the Service.

Retention and deletion

The full text of a demand letter is deleted 7 days after the scan; only the extracted list of claims is kept with the results. Free scans that don't lead to a purchase are deleted, with their screenshots and any email address given to receive them, after 30 days; we keep only an anonymous summary without the website's address. Purchased reports are kept so your report links keep working. Email us to delete a scan, the letter text or a report at any time.

Aggregate statistics

We may publish anonymous, aggregated statistics (for example, how often a type of issue appears across websites). We never publish the name or address of a website that used the Service without its permission.

Contact

support@fixreports.com